Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          DkrtUDdFX5/WH/NTnwv59wJmZqn64XP6RxulrKLFT5s=
Subject key identifier:   1D:FB:BF:0A:34:20:12:FF:33:31:82:E5:1D:AA:2B:E3:18:09:4B:B1
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       019CAD5A056962B4761BD0D80FEFA25FAB3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          0739
Signing time:             Mon 02 Mar 2026 07:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:23 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: GRDhkW34pqJgiglTxmJIBMBc9OsiVNZfKKFWKsPlqQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:05:69:62:b4:76:1b:d0:d8:0f:ef:a2:5f:ab:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Mar  2 07:01:23 2026 GMT
            Not After : Mar  3 07:01:23 2026 GMT
        Subject: CN=1dfbbf0a342012ff333182e51daa2be318094bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:59:72:93:fa:ee:17:97:77:64:49:70:0a:
                    01:d5:81:ae:2e:b8:88:a8:36:6c:c6:61:71:aa:56:
                    88:71:07:9d:5c:24:16:ab:22:66:71:ed:b6:9d:c4:
                    05:50:9d:0b:d0:dc:9d:ed:c1:ee:01:f7:68:94:4f:
                    cb:7e:56:54:22:f5:04:1c:4b:9a:c1:60:47:74:e6:
                    21:ab:ef:d4:10:86:84:3a:78:b8:50:d3:cf:4d:0d:
                    26:4b:05:df:e6:01:41:f2:24:37:60:51:e1:74:3b:
                    6a:92:84:88:55:89:3f:09:e0:8c:0b:5d:cf:c8:19:
                    f7:f8:f0:cd:a9:bd:7b:47:fc:49:9b:11:06:a3:07:
                    57:8d:67:cb:81:39:92:9f:d2:96:ab:54:df:f2:b6:
                    e4:e7:6e:f8:d3:38:45:88:0d:a7:24:af:62:2c:cf:
                    b7:a1:83:fb:10:cb:60:f5:45:a7:c5:e5:3c:9c:ed:
                    9f:53:47:d0:15:37:27:3d:5a:d5:4e:6e:59:0c:e7:
                    71:3c:32:67:c9:22:87:d7:89:d6:86:e9:6e:31:e1:
                    6a:05:5b:1e:90:8f:ae:1e:2f:75:54:b8:94:31:9a:
                    a1:0a:6c:d7:23:38:b7:a6:a8:14:d1:46:f6:0f:41:
                    30:4c:1d:e8:01:06:9e:aa:bd:e5:14:2c:c4:7b:8a:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FB:BF:0A:34:20:12:FF:33:31:82:E5:1D:AA:2B:E3:18:09:4B:B1
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e9:80:36:93:21:c3:62:73:6e:59:96:12:a2:82:f5:50:1e:
         65:0d:7f:90:3a:be:9a:de:b1:e5:8b:9b:1c:3c:6e:f3:80:ab:
         91:47:57:6f:25:8f:19:bc:d2:11:69:b4:e2:81:98:c0:6c:23:
         9a:f9:ec:53:b3:32:3f:31:94:7f:9e:c3:8e:36:c0:41:67:89:
         a8:af:96:70:e1:ee:f7:c0:a0:a5:f4:c4:28:b5:57:98:8d:50:
         2e:46:3d:12:7d:bd:71:08:70:6c:fa:a2:9e:f2:87:ea:54:0f:
         15:de:b6:82:36:cb:f7:a9:b6:86:87:72:cf:81:54:b8:fd:90:
         f2:79:27:1b:08:ec:43:59:dc:d0:ef:8f:76:ee:e2:75:f0:31:
         f4:58:8f:70:c8:8a:8d:2c:88:cf:06:58:99:60:8e:c4:29:7d:
         7f:df:c2:68:fb:bb:85:71:c7:0a:e4:c8:73:b3:be:11:e0:79:
         c9:11:c7:30:a7:19:c3:27:5d:0e:42:cc:d4:bd:0b:2a:71:82:
         a0:b8:9e:ba:a0:b6:95:98:65:e9:2f:7f:8f:39:ff:86:9e:13:
         52:28:73:f7:42:ac:15:86:b3:e2:b1:54:3d:65:07:f6:d1:8b:
         cd:35:7b:55:b7:78:92:db:f7:93:cf:2e:1b:97:c2:5f:14:92:
         03:b6:ac:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWgVpYrR2G9DYD++iX6s6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWU2ZGZiMzkyOTVjOTNhMDQ3MmM5YzEzNTU5NDAxOGE4
ZmNiNWMwHhcNMjYwMzAyMDcwMTIzWhcNMjYwMzAzMDcwMTIzWjAzMTEwLwYDVQQD
EygxZGZiYmYwYTM0MjAxMmZmMzMzMTgyZTUxZGFhMmJlMzE4MDk0YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBhZcpP67heXd2RJcAoB1YGuLriI
qDZsxmFxqlaIcQedXCQWqyJmce22ncQFUJ0L0Nyd7cHuAfdolE/LflZUIvUEHEua
wWBHdOYhq+/UEIaEOni4UNPPTQ0mSwXf5gFB8iQ3YFHhdDtqkoSIVYk/CeCMC13P
yBn3+PDNqb17R/xJmxEGowdXjWfLgTmSn9KWq1Tf8rbk52740zhFiA2nJK9iLM+3
oYP7EMtg9UWnxeU8nO2fU0fQFTcnPVrVTm5ZDOdxPDJnySKH14nWhuluMeFqBVse
kI+uHi91VLiUMZqhCmzXIzi3pqgU0Ub2D0EwTB3oAQaeqr3lFCzEe4qa7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB37vwo0IBL/MzGC5R2qK+MYCUuxMB8GA1UdIwQY
MBaAFOsebfs5KVyToEcsnBNVlAGKj8tcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEt
ZjA4NWFmOTU3YzhkLzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEtZjA4NWFmOTU3Yzhk
LzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+mANpMh
w2JzblmWEqKC9VAeZQ1/kDq+mt6x5YubHDxu84CrkUdXbyWPGbzSEWm04oGYwGwj
mvnsU7MyPzGUf57DjjbAQWeJqK+WcOHu98CgpfTEKLVXmI1QLkY9En29cQhwbPqi
nvKH6lQPFd62gjbL96m2hodyz4FUuP2Q8nknGwjsQ1nc0O+Pdu7idfAx9FiPcMiK
jSyIzwZYmWCOxCl9f9/CaPu7hXHHCuTIc7O+EeB5yRHHMKcZwyddDkLM1L0LKnGC
oLieuqC2lZhl6S9/jzn/hp4TUihz90KsFYaz4rFUPWUH9tGLzTV7Vbd4ktv3k88u
G5fCXxSSA7asWA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:01 2026 by rpki-client